Dynamic APF SMF Record
This chapter describes the new System Management Facilities (SMF) record that is used to track authorized program facility (APF) changes that are performed dynamically after an initial program load (IPL).
4.1 Dynamic APF SMF record enhancement
When APF commands are dynamically issued to change APF status for data sets, these changes are not tracked by SMF records. Therefore, changes cannot be monitored.
Starting with z/OS V2R2, a new SMF type 90, subtype 37 record is created whenever a dynamic APF change occurs. This solution provides improved auditability to APF changes.
The SMF record is created for each post-IPL APF change (APF statement in PROGxx, SETPROG APF command, and CSVAPF macro). IPL APF definitions are not tracked by SMF. The following event types are available:
•Add
•Delete
•Change to dynamic format
•Change to static format
The SMF record includes the following fields:
•Function
•Origin (CSVAPF, SET PROG, SETPROG with PROGxx suffix)
•Data set name
•Volume ID
•Timestamp of the operation
•Jobname of the requester
•CHKEY (for example, step name) of the requester
•Console ID of the requester
•Security product user token (Utoken) of the requester
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.